Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          3Pu6sO9v6tE6j7BMCdB2cDKKhi6wz1puYBnp09nxdFc=
Subject key identifier:   E8:2F:6E:B0:30:06:6F:9E:C6:FB:66:86:72:B4:9B:C4:26:5C:07:CF
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       01A14F50820FA70F999A2401690403E8B303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          1ABC
Signing time:             Sun 18 Oct 2026 14:00:38 +0000
Manifest this update:     Sun 18 Oct 2026 14:00:38 +0000
Manifest next update:     Mon 19 Oct 2026 14:00:38 +0000
Files and hashes:         1: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
                          2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: fZRQqXywVf5bwMK8FteYtGaaiTEkWxmvNCNuXfcC/gA=)
                          3: euy-jk1gO1wrAYZN4p50UuYsEPs.roa (hash: KSckesEUkDLC/vCF7oLNqmhTklvyJBTosAv+lpvioKk=)
                          4: saXncTu8Jyn9wHWn8gtxElcn7uk.roa (hash: IsO7tvAcqIRqvr9qvI5jdboB3g/FW6hvUsM1vnYO7yQ=)
                          5: t7vrOp3nsycdnJxMZ5NoWiSkRSY.roa (hash: b9S+rL7jAdeW6E9Q/4UXcld20c94fuGo0soey73m5u8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:50:82:0f:a7:0f:99:9a:24:01:69:04:03:e8:b3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Oct 18 14:00:38 2026 GMT
            Not After : Oct 19 14:00:38 2026 GMT
        Subject: CN=e82f6eb030066f9ec6fb668672b49bc4265c07cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:c3:e3:d2:93:36:40:53:e3:4c:46:7b:51:
                    9e:28:7e:a0:25:98:28:4f:60:4a:01:ca:3c:94:cf:
                    f1:00:38:b2:44:72:13:af:b2:a6:bf:22:ae:d7:b6:
                    ca:4c:6a:59:46:3a:17:4f:51:66:f7:83:e5:f9:ab:
                    aa:20:c6:43:2c:b4:0c:db:87:93:c0:04:5d:e0:b2:
                    13:fd:56:b2:2b:12:98:70:de:ce:fd:b3:1a:be:5b:
                    18:80:16:d8:51:d9:34:36:a2:6a:15:d3:97:ff:9d:
                    01:1a:b0:49:db:18:ef:a3:04:70:fe:95:b4:5b:d9:
                    55:a1:24:33:27:42:5c:19:41:ec:70:64:be:dc:5f:
                    61:8d:9f:74:07:55:23:d8:c4:b3:82:2d:48:38:b6:
                    55:8c:19:9d:bc:cc:0b:51:0b:8c:37:9e:5a:99:90:
                    59:99:dd:1a:db:1e:77:fb:d7:c7:95:71:2d:d5:cf:
                    55:72:d0:98:ae:4a:ab:53:96:d1:7a:b0:66:5f:8f:
                    23:69:ad:98:88:e2:96:8e:14:67:b5:4c:69:d2:94:
                    7e:41:20:4c:55:97:c1:d3:57:4e:27:19:1a:53:f8:
                    63:7f:64:64:63:77:1c:b1:71:ab:57:00:1d:a3:64:
                    18:c0:42:e5:23:18:fe:79:12:70:ad:32:1c:ec:21:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2F:6E:B0:30:06:6F:9E:C6:FB:66:86:72:B4:9B:C4:26:5C:07:CF
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a8:07:76:85:ee:b2:8e:d8:29:9c:45:38:e3:25:e6:0a:c5:
         e3:5a:cc:ce:d1:d5:03:e6:5f:27:0b:06:05:18:29:43:66:e2:
         05:d5:1d:cb:af:f3:98:9b:55:27:cb:30:d6:28:81:ee:b6:cc:
         be:2f:44:6f:71:48:8d:a5:ca:fc:c8:01:93:28:ad:24:7a:f0:
         22:c6:d5:a9:2d:2c:26:75:c3:5d:b1:75:f7:70:5e:62:c5:f3:
         3c:cc:b6:7b:90:65:09:1a:03:16:bd:b8:fc:38:91:6a:a3:93:
         24:2b:c8:53:88:f4:94:3d:89:7e:2e:d7:fd:08:c0:37:2e:f0:
         54:a5:07:48:eb:60:3f:0e:36:24:21:2f:e8:0c:0e:41:06:0d:
         52:64:26:2d:a6:88:1b:93:f8:40:84:5c:4d:c9:d6:76:3d:0f:
         3d:b0:60:1d:ff:2c:49:46:3a:6c:e0:db:4c:d9:e1:bf:20:c9:
         60:56:34:c4:cb:a2:fb:52:37:56:fa:52:63:f3:4b:c3:b6:df:
         4e:d3:ff:3c:1f:57:aa:3a:cc:94:e6:05:11:58:c2:8a:5c:c0:
         48:e8:da:db:3f:11:a5:3e:a8:3b:4e:ee:2d:f2:9e:c4:43:d3:
         ab:ea:d2:65:dd:e8:90:89:94:b4:07:6e:91:69:c2:e8:c9:78:
         c8:b5:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:41:46 2026 by rpki-client